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(57) It is provided a data storage device which reads 
data from and/or writes data to a memory medium, com- 
prising: a storage unit for storing a first identifier; an 
identifier acquisition unit for acquiring a second identifier 
recorded on a memory medium which is set to said data 
storage device; and a controller for comparing said first 
identifier with said second identifier, and controlling to 
access to said memory medium for data reading and/or 
writing according to a relationship between said first 
identifier and said second identifier. For example, when 
the first identifier does not match the second identifier, 
the controller inhibits access to the memory medium for 
the reading and writing of data. But when the first and 
the second identifiers match, the controller permits ac- 
cess to the memory medium for the reading and writing 
of data. 

Since the storage device having an identifier which 
differs from the identifier recorded on the memory me- 
dium inhibits access to the memory medium for the 
reading and writing of data, the secrecy of data recorded 
on the memory medium is ensured. 
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Description 

BACKGROUND OF THE INVENTION 

Field of the Invention 5 

[0001] The present invention relates to a data storage 
device for recording data on a memory medium, such 
as a magneto-optical disk, and in particular to a data 
storage device which ensures the secrecy and the se- 
curity of recorded data. 

Related Arts 

[0002] Generally, a data writable memory medium, 
such as a magneto-optical disk (MO), can be inserted 
into or removed from a data storage device (hereinafter 
simply referred to as a storage device) which reads and 
writes predetermined data from and to. When a memory 
medium is loaded into the storage device, operational 
control for the storage device is provided by commands 
issued by a superior apparatus, such as a personal com- 
puter connected to the storage device by a SCSI cable. 
[0003] Conventionally, by taking compatibility into ac- 
count, reading data from and writing data to a memory 
medium can also be performed by a storage device oth- 
er than the device which was originally employed for 
writing data. 

[0004] Fig. 28 is a flowchart for a data reading/writing 
process performed by a conventional storage device. 
After a memory medium is set to (for example, inserted 
into) the storage device at step S1 , at step S2 the me- 
dium is loaded. That is, the memory medium is posi- 
tioned at a predetermined location within the storage de- 
vice and is rotated at a controlled revolution rate. At step 
S3, predetermined data relevant to the memory medi- 
um, such as its configuration and its memory capacity, 
are read, and at step S4 the reading and writing of data 
is enabled by the employment of an operation or a proc- 
ess procedure based on data corresponding to that for 
the memory medium. 

[0005] Therefore, a problem has arisen in that once a 
memory medium has been acquired, secret data record- 
ed on the memory medium, such as the contents of a 
client database or design data, can easily be stolen or 
altered. 

SUMMARY OF THE INVENTION 

[0006] It is, therefore, one objective of the present in- 
vention to provide a data storage device that ensures 
the secrecy and the security of data recorded on a mem- 
ory medium. 

[0007] To achieve the above objective, according to 
the present invention, it is provided a data storage de- 
vice which reads data from and/or writes data to a mem- 
ory medium, comprises: 
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a storage unit for storing a first identifier; 
an identifier acquisition unit for acquiring a second 
identifier recorded on a memory medium which is 
set to said data storage device; and 
a controller for comparing said first identifier with 
said second identifier, and controlling to access to 
said memory medium for data reading and/or writ- 
ing according to a relationship between said first 
identifier and said second identifier. 

[0008] For example, when the first identifier recorded 
in the storage unit does not match the second identifier 
recorded on the memory medium, the controller inhibits 
access to the memory medium for the reading and writ- 
ing of data. But when the first and the second identifiers 
match, the controller permits access to the memory me- 
dium for the reading and writing of data. 
[0009] As described above, since the storage device 
having an identifier which differs from the identifier re- 
corded on the memory medium inhibits access to the 
memory medium for the reading and writing of data, the 
secrecy of data recorded on the memory medium is en- 
sured. 

[001 0] Read address information to be used to control 
reading of data and/or write address information to be 
used to control writing of data are stored in a predeter- 
mined area on the memory medium. When the first iden- 
tifier matches the second identifier, the controller may 
permit or inhibit the reading and/or writing of data ac- 
cording to the read address information and/or the write 
address information respectively. 
[001 1 ] In addition , to achieve the above objective, ac- 
cording to the present invention, it is provided a data 
storage device which reads data from and/or writes data 
to a memory medium by designating first address infor- 
mation, comprises: 

a storage unit for storing a first identifier; 
an identifier acquisition unit for acquiring a second 
identifier recorded in a memory medium which is set 
to said data storage device; 

an address information acquisition unit for acquiring 
second address information recorded in said mem- 
ory medium; and 

a controller for comparing said first identifier with 
said second identifier and said first address infor- 
mation with said second address information, and 
controlling to access to said memory medium for 
data reading and/or writing according to a relation- 
ship between said first identifier and said second 
identifier and a relationship between said first ad- 
dress information and said second address infor- 
mation. 

[001 2] The first identifier and the second identifier are 
identifiers inherent to a data storage device or identifiers 
inherent to a memory medium. For example, the identi- 
fier inherent to a data storage device or memory medium 
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is a serial number of a data storage device or a memory 
medium. 

[0013] Thus, Security can be established for each of 
a plurality of data items recorded on a memory medium. 
[001 4] Read address information to be used to control 
reading of data and/or write address information to be 
used to control writing of data are stored in a predeter- 
mined area on the memory medium. When the first iden- 
tifier matches the second identifier and the second ad- 
dress information is included in the first address infor- 
mation, the controller may permit or inhibit the reading 
and/or writing of data according to the read address in- 
formation and/or the write address information respec- 
tively. 

[001 5] In this structured data storage device, the con- 
troller records the second identifier, the read address 
information, the write address information, or the sec- 
ond address information in the predetermined area 
based on a predetermined setup command which is 
transmitted by a control device of a data storage device 
connected to the data storage device. 
[001 6] A predetermined setup command is, for exam- 
ple, a SCSI interface format command or a vender 
unique command. 

[0017] Further, it is preferable that.the controller can 
initialize a predetermined area based on a predeter- 
mined release command, which is transmitted from the 
control device of a data storage device connected to the 
data storage device. 

[0018] Other features and advantages of the present 
invention will become readily apparent from the follow- 
ing description when taken in conjunction with the ac- 
companying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0019] The accompanying drawings, which are incor- 
porated in and constitute a part of the specification, il- 
lustrate presently preferred embodiments of the inven- 
tion, and together with the general description given 
above and the detailed description of the preferred em- 
bodiments given below, serve to explain the principle of 
the invention, in which: 

Fig. 1 is a block diagram illustrating a data storage 
device according to embodiments of the present in- 
vention; 

Fig. 2 is a diagram showing an example layout for 
a format for a magneto-optical disk; 
Fig. 3 is a diagram showing the structure of a CDB 
for a security setup command that employs a ven- 
dor unique command; 

Fig. 4 is a diagram showing the structure of a CDB 
for a format command the security level of which is 
designated; 

Fig. 5 is a flowchart for security process performed 
according to a first embodiment of the present in- 
vention; 



Figs. 6A and 6B are diagrams depicting the struc- 
tures of a parameter header and a level descriptor; 
Figs. 7A and 7B are diagrams in each of which is 
shown the structure of a parameter field for a level 
5 descriptor; 

Fig. 8 is a flowchart for the security process per- 
formed according to a second embodiment of the 
present invention; 

Fig. 9 is a flowchart for the security process per- 
10 formed according to a third embodiment of the 
present invention; 

Fig. 10 is a flowchart for the security process per- 
formed according to a fourth embodiment of the 
present invention; 
15 Fig. 11 is a flowchart for the security process per- 
formed according to a fifth embodiment of the 
present invention; 

Fig. 12 is a flowchart for the security process per- 
formed according to a sixth embodiment of the 
20 present invention; 

Fig. 13 is a flowchart for the security process per- 
formed according to a seventh embodiment of the 
present invention; 

Fig. 14 is a flowchart for the security release proc- 
25 ess; 

Fig. 1 5 is a flowchart for the memory medium load- 
ing process performed when security information is 
encoded; 

Fig. 1 6 is a flowchart for the memory medium load- 
so ing process performed when security information is 

encoded and a password is set; 

Fig. 17 is a flowchart for recording process of the 

medium identifier to the storage device; 

Fig. 1 8 is a flowchart for security process performed 
35 according to an eighth embodiment of the present 

invention; 

Fig. 19 is a flowchart for the security process per- 
formed according to a ninth embodiment of the 
present invention; 
<o Fig. 20 is a flowchart for the security process per- 
formed according to a tenth embodiment of the 
present invention; 

Fig. 21 is a flowchart for the security process per- 
formed according to an eleventh embodiment of the 
^5 present invention; 

Fig. 22 is a flowchart for the security process per- 
formed according to a twelfth embodiment of the 
present invention; 

Fig. 23 is a flowchart for the security process per- 
50 formed according to a thirteenth embodiment of the 
present invention; 

Fig. 24 is a flowchart for the security process per- 
formed according to a fourteenth embodiment of the 
present invention; 
55 Fig. 25 is a flowchart for the security release proc- 
ess in the another embodiments; 
Fig. 26 is a flowchart for the memory medium load- 
ing process performed when security information is 
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encoded in the another embodiment; 
Fig. 27 is a flowchart for the memory medium load- 
ing process performed when security information is 
encoded and a password is set in the another em- 
bodiment; and 5 
Fig. 28 is a flowchart showing the conventional 
process performed when accessing a memory me- 
dium in the another embodiment. 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

[0020] The preferred embodiments of the present in- 
vention will now be described while referring to the ac- 
companying drawings. However, the technical scope of 
the present invention is not limited to these embodi- 
ments. The same reference numerals or device identi- 
fiers are used to denote corresponding or identical com- 
ponents in the drawings. 

[0021] In the embodiment of the present invention, a 
magneto-optical disk (MO) is employed as a memory 
medium (hereinafter referred to as a medium) for re- 
cording data, but the medium that can be employed is 
not thereby limited, and another exchangeable memory 
disk, such as a magnetic disk, a floppy disk, an optical 
disk or a phase change optical disk may be employed. 
[0022] Fig. 1 is a schematic block diagram illustrating 
a magneto-optical disk device according to the present 
invention. In Fig. 1, a magneto-optical disk device 1 is 
connected via a SCSI interface to a personal computer 
2, which is a superior apparatus. 
[0023] The magneto-optical disk device 2 comprises 
a mechanism controller 10, for performing writing data 
to and reading data from a magneto-optical disk, and a 
control unit which includes a magneto-optical disk con- 
troller (ODC) which employs firmware to implement a 
method according to the present invention. 
[0024] The control unit further includes an MPU 12, 
which controls the entire magneto-optical disk device 1 ; 
a D-RAM 13, which is a read/write buffer memory; a 
DSP 14, for performing positioning; a write data ampli- 
fier 1 4; a read data amplifier 1 6; an AGC amplifier 1 7; a 
head drive power amplifier 18; and a disk rotation motor 
controller 19. 

[0025] The mechanism controller 1 0 includes a head 
sensor 100, a data reading/writing laser diode 101 , and 
a detector 102 for detecting the inclination of a head. 
Further, the mechanism controller 10 includes a focus 
actuator 1 03, which is controlled by the head drive pow- 
er amplifier 1 8; a track actuator 1 04; a disk ejection mo- 
tor 1 05; a head drive voice coil motor 1 06; and a spindle 
motor 107, which is controlled by the motor controller 
19 for rotating a disk. 

[0026] When an operator enters an instruction at a 
keyboard 3 of the personal computer 2, a SCSI com- 
mand is transmitted by the computer 2 to the magneto- 
optical disk controller (ODC) 11 to initiate the writing/ 
reading of data. Connected to the computer 2 is a dis- 



play 4 on which data are displayed. 
[0027] The magneto-optical disk controller (ODC) 1 1 , 
which is provided with flash ROM for the storage of 
firmware, has an analysis function for analyzing SCSI 
commands received from the computer 2, and a coor- 
dination function for interacting with the MPU 12, in re- 
sponse to a SCSI command, to provide data writing/ 
reading control of the mechanism controller 10. 
[0028] The present invention can be applied not only 
for a SCSI command system but also for another com- 
mand system, such as an ATA/ATAPl/SASI command 
system. 

[0029] Fig. 2 is a diagram showing an example layout 
of a disk format for a magneto-optical disk (MO), i.e., 
the arrangement of areas on a medium as specified by 
the ISO standards established for 3.5 inch magneto-op- 
tical disk cartridges. As is shown in Fig. 2, in a range 
extending from a radius of 23.72 mm from the center of 
the MO disk to a radius of 41 .00 mm is a data area in 
which user data can be recorded. The inside and the 
outside areas in the radial direction are medium infor- 
mation management areas in which are stored various 
medium information, such as the type and the structure 
of a medium. 

[0030] In the preferred embodiments of the present 
invention, an additional security area is provided in the 
medium information management area, and recorded 
as security information in the security area is a device 
identifier inherent to a magneto-optical disk device 
(hereinafter referred to as a storage device), such as a 
serial number. Or alternately, areas for manufacturers 
in an inner test zone and an outer test zone or a buffer 
zone in Fig. 2 may be employed as security areas. 
[0031] When a magneto-optical disk in which the de- 
vice identifier is recorded is inserted into a specific stor- 
age device, data reading/writing control is provided in 
accordance with the relationship between the device 
identifier of the storage device and the device identifier 
recorded in the medium. For example, only when the 
two identifiers match, the reading/writing of data is per- 
mitted. In other words, since a storage device whose 
device identifier differs from that recorded in a medium 
inhibits the reading/writing of data from/to the medium, 
the secrecy of data can be maintained. 
[0032] The writing in a medium of the device identifier 
is performed by the magneto-optical disk controller 
(ODC) 11 of a storage device in accordance with a se- 
curity setup command received from a superior appara- 
tus. Fig. 3 is a diagram showing an example CDB (Com- 
mand Descriptor Block) for a security setup command 
which is transmitted from the personal computer 2 to the 
storage device 1. The security setup command in Fig. 
3 is prepared by using a vender unique command for 
the SCSI interface. As is described above, the security 
setup data, according to which medium access is per- 
mitted only when the device identifier recorded in a me- 
dium matches the device identifier of a storage device, 
are set to the security level of the security setup com- 
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mand. 

[0033] The security level may be designated in ac- 
cordance with a normal format command, instead of the 
security setup command being set by using the vender 
unique command. Fig. 4 is a diagram showing an exam- 
ple CDB for a format command for which the security 
level is set by using the SCSI command. 
[0034] When the magneto-optical disk controller 
(ODC) 11 of the storage device 1 receives a security 
setup command or a format command, the security level 
of which has been set, the disk controller 11 writes 
(records) the device identifier of the storage device in a 
pre-designated security area on the loaded medium. As 
a result, the security information is recorded in the me- 
dium. The device identifier of the storage device is 
stored in the flash ROM provided for the magneto-opti- 
cal disk controller (ODC) 11 . 

[0035] Fig. 5 is a flowchart for the security process, 
performed by the above described storage device 1 , ac- 
cording to a first embodiment of the present invention. 
The security process; which will be explained below, is 
performed by the magneto-optical disk controller (ODC) 
1 1 of the storage device 1 . 

[0036] In Fig. 5, when a medium is set to (for example, 
inserted into) the storage device 1 at step S1 01 , the me- 
dium is loaded at step S1 02. That is, the medium is po- 
sitioned at a predetermined location within the storage 
device 1 , and is rotated at a specific rotation rate. At step 
S103, data in the medium information management ar- 
ea on the medium are read, and at step S104, the se- 
curity information (device identifier) recorded in the se- 
curity area are read. 

[0037] At step S105, a check is performed to deter- 
mine whether the security area is in the initial state. 
When the security area is in the initial state, i.e., when 
no device identifier has been recorded in the security 
area, the process then advances to step S1 08, whereat 
the reading of data from the medium and the writing of 
data to it are permitted. It is assumed that the security 
level has not yet been set. 

[0038] If, at step S1 05, the device identifier has been 
recorded in the security area, i.e., if the security level 
has been set, at step S1 06, the device identifier record- 
ed on the medium is compared with the device identifier 
of the storage device 1 in which the medium is currently 
loaded in order to determine whether the two device 
identifiers match. 

[0039] When the two device identifiers match, the 
process then advances to step S108, whereat the se- 
curity is released and the reading of data from the me- 
dium and the writing of data to it are permitted. 
[0040] When at step S106, the two device identifiers 
do not match, the security is not released and the read- 
ing/writing of data is inhibited (step S107). 
[0041] As described above, in this embodiment, the 
security area in which the device identifier of a storage 
device is recorded is provided for the medium informa- 
tion management area. When the medium is loaded into 



the storage device and when the device identifier of the 
storage device does not match the device identifier re- 
corded in the medium, the reading and writing of data is 
inhibited. Thus, even though the medium has been sto- 
5 len, the secrecy of the data recorded in the medium can 
be maintained. 

[0042] To enhance the security, it is preferable that a 
further security function is prepared in addition to the 
above security information. 

10 [0043] Thus, read address information and write ad- 
dress information are recorded in the parameter head 
of a parameter, which is designated by the security set- 
up command (Fig. 3) or the format command (Fig. 4) for 
which the security level has been set. Figs. 6A and 6B 

*5 are diagrams showing an example structure for a pa- 
rameter designated by the above command. The pa- 
rameter is constituted by a parameter head shown in 
Fig. 6A and a level descriptor shown in Fig. 6B. The read 
and write address information is recorded in the param- 

20 eter head in Fig. 6A. The level descriptor in Fig. 6B con- 
sists of a header of two bytes and a succeeding param- 
eter field. The parameter field is divided into units called 
pages, for individual function attributes. 
[0044] If, for example, the read address information 

25 has been designated, the reading of data is inhibited 
even when the device identifiers match. If the read ad- 
dress information has not been set, the reading of data 
is permitted. 

[0045] If the write address information has been des- 
30 ignated, the writing of data can be inhibited even when 
the device identifiers match. If the write address infor- 
mation has not been set, the writing of data is permitted. 
The read address information and the write address in- 
formation are recorded in the security area at the same 
35 time when the device identifier of the storage device is 
recorded in the security area. 

[0046] When the read address information or the write 
address information has been set, the reading or writing 
of data is inhibited, which is inconvenient. Therefore, 

40 preferably, if the read address information or the write 
address information has been set, a predetermined 
password is also set, so that when a password is input, 
the reading or writing of data can be enabled even 
though the address information has been set. In addi- 

45 tion, when a predetermined password has been set, re- 
gardless of whether the read or write address informa- 
tion has been set, and when reading and writing are per- 
mitted if the both of the device identifiers and the pass- 
words match, a. double level of security can be estab- 

50 lished and the secrecy of data can be enhanced. 

[0047] The password is recorded in the level descrip- 
tor in the parameter. Fig. 7A is a diagram showing a 
page for a password in the parameter field (see Fig. 6B) 
of the level descriptor. When the security is set up, the 

55 password is recorded to the security area of the medium 
together with the address information. Fig. 7B is a dia- 
gram showing pages, in the parameter field of the level 
descriptor, designated for a logical block address (LBA), 
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which will be described later. 

[0046] Fig. 8 is a flowchart for the security process 
performed according to a second embodiment of the 
present invention. In the second embodiment, the read 
address information is recorded in the above described 5 
parameter head. Since steps S201 to S205 in Fig. 8 cor- 
respond to steps S101 to S105 in Fig. 5, no explanation 
for them will be given. 

[0049] When, at step S205, the security area is in the 
initial state, it is assumed that the security information 10 
has not yet been set, and the process advances to step 
S21 1 , whereat the reading of data from the medium and 
writing of data to the medium are permitted. If, at step 

5205, the security information has been set, at step 

5206, the device identifier recorded on the medium is is 
compared with the device identifier of a storage device 
into which the medium has currently been loaded to de- 
termine whether the two device identifiers match. When 

the device identifiers do not match, the security is not 
released } and the reading and writing of data are inhib- 20 
ited (step S207). 

[0050] When the two device identifiers match, the 
process advances to step S208, whereat a check is per- 
formed to determine whether reading in accordance 
with the read address information is permitted. When 25 
read address information has been set, the process ad- 
vances to step S209, whereat the reading of data is en- 
abled but the writing of data is inhibited. That is, even 
though data stored on the medium can be read and the 
contents can be examined, the writing of data, such as 30 
the altering of data, is not enabled. When the read ad- 
dress information has not been set, the process advanc- 
es to step S210, whereat both the reading and the writ- 
ing of data are inhibited. 

[0051] Fig, 9 is a flowchart showing the security proc- 35 
ess performed according to a third embodiment of the 
present invention. In this embodiment, the write address 
information is set in the parameter header. Since steps 
S301toS305 in Fig. 9 correspond to steps S1 01 toS105 
in Fig. 5, no explanation for them will be given. 40 
[0052] When, at step S305, the security area is in the 
initial state, it is assumed that the security information 
has not yet been set and the process advances to step 
S31 1 , whereat the reading of data from the medium and 
the writing of data to the medium are permitted. If, at 45 
step S305, the security information has been set, at step 
S306, the device identifier recorded on the medium is 
compared with the device identifier of the storage device 
into which the medium has currently been loaded to de- 
termine whether the two device identifiers match. When so 
the device identifiers do not match, the security are not 
released, and the reading and the writing of data are 
inhibited (step S307). 

[0053] When the two device identifiers match, the 
process advances to step S308 , whereat a ch eck is per- 55 
formed to determine whether writing in accordance with 
the write address information is permitted. When the 
write address information has been set, the process ad- 



vances to step S309, whereat the writing of data is per- 
mitted but the reading of data is inhibited. That is, even 
though new data can be created, the data stored on the 
medium can not be read. When the write address infor- 
mation has not been set, the process advances to step 
S310, whereat both the reading and the writing of data 
are inhibited. 

[0054] Fig. 10 is a flowchart showing the security 
process performed according to a fourth embodiment of 
the present invention. In this embodiment, both the read 
address information and the write address information 
are set in the parameter header. Since steps S401 to 
S405 in Fig. 10 correspond to steps S101 to S105 in 
Fig. 5, no explanation for them will be given. 
[0055] When, at step S405, the security area is in the 
initial state, it is assumed that the security information 
has not yet been set, and the process advances to step 
S41 5, whereat the reading of data from the medium and 
writing of data to the medium are permitted. If, at step 

5405, the security information has been set, at step 

5406, the device identifier recorded on the medium is 
compared with the device identifier of the storage device 
into which the medium has currently been loaded to de- 
termine whether the two device identifiers match. When 
the device identifiers do not match, the security is not 
released, and the reading and the writing of data are 
inhibited (step S407). 

[0056] When the two device identifiers match, the 
process advances to step S408, whereat a check is per- 
formed to determine whether reading in accordance 
with the read address information is permitted. When 
the read address information has been set, the process 
advances to step S409, whereat a check is performed 
to determine whether writing in accordance with the 
write address information is permitted. When the write 
address information has been set, at step S41 0 both the 
reading and the writing of data are enabled. If, at step 
S409, the write address information has not been set, 
at step S41 1 , the reading of data is enabled and the writ- 
ing of data is inhibited. 

[0057] If, at step S408, the read address information 
has not been set, the process advances to step S41 2, 
whereat, as well as at step S409, a check is performed 
to determine whether writing in accordance with the 
write address information is permitted. When the write 
address information has been set, at step S41 3, the writ- 
ing of data is permitted but the reading of data is inhib- 
ited. If, at step S41 2, the write address information has 
not been set, at step S414, both the reading and the 
writing of data are inhibited. 

[0058] In above described embodiments, the security 
is set to all data stored in the medium is read. But it is 
preferable to set the security to a part of the data, be- 
cause a part of the data needs to be set the security. 
[0059] Therefore, when the security information is re- 
corded to the medium, a logical block address (LBA) for 
data for which the security is to be set is designated to 
the level descriptor for the parameter in Fig. 6. Morespe- 
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cifically, an LBA designation page to designate data for 
which the security is to be set is provided for the param- 
eter field in the level descriptor (see Fig. 7B). As is 
shown in Fig. 7B, a single data LBA (security LBA) for 
setting the security is designated which has, for exam- 5 
pie, a length of three bytes. The data for the security 
LBA are recorded in the security area at the same time 
as the device identifier of the storage device is recorded 
in the security area. 

[0060] Fig. 1 1 is a flowchart for the security process 10 
performed according to a fifth embodiment of the 
present invention. In the fifth embodiment, as well as in 
the second embodiment, the security LBA is set when 
the read address information is set. Since steps S501 
to S505 in Fig. 11 correspond to steps S101 to S105 in 15 
Fig. 5, no explanation for them will be given. 
[0061] When, at step S505, the security area is in the 
initial state, it is assumed that the security information 
has not yet been set and the process advances to step 
S51 6, whereat the reading of data from the medium and 20 
the writing of data to the medium are permitted. If, at 
step S505, the security information has been set, at step 
S506, the device identifier recorded on the medium is 
compared with the device identifier of the storage device 
into which the medium has currently been loaded to de- 25 
termine whether the two device identifiers match. When 
the device identifiers do not match, at step S507, a 
check is performed to determine whether a security LBA 
has been designated in the security area. When a se- 
curity LBA has not been designated, the reading and the 30 
writing of data are inhibited (step S508). 
[0062] If, at step S507, a security LBA has been des- 
ignated, at step S509, a check is performed to determine 
whether the LBA for the data that are being accessed 
has been included in the security LBA. If the LBAforthe 35 
data has been included in the security LBA, the process 
advances to step S51 0, whereat the reading of data and 
the writing of data are inhibited. 

[0063] If the LBA for the data has not been included, 
the process advances to step S51 1 , whereat the reading 40 
of data and the writing of data are permitted. 
[0064] When, at step S506, the two device identifiers 
match, at step S512, a check is performed to determine 
whether the LBA for the data that are being accessed 
has been included in the security LBA. If the LBAforthe 45 
data has been included in the security LBA, the process 
advances to step S513, whereat a check is performed 
to determine whether reading in accordance with read 
address information is enabled. 

[0065] When the read address information has been so 
set, the process advances to step S514, whereat the 
reading of data is permitted but the writing of data is in- 
hibited. That is, though data stored on the medium can 
be read and the contents can be examined, the writing 
of data, such as the altering of data, is not enabled. 55 
When the read address information has not been set, 
the process advances to step S515, whereat both the 
reading and the writing of data are inhibited. 



[0066] If, at step S51 2, the LBA for the data that are 
being accessed has not been included in the security 
LBA, the process advances to step S516, whereat the 
reading of data and the writing of data are permitted. 
[0067] Fig. 12 is a flowchart for the security process 
performed according to a sixth embodiment of the 
present invention. In the sixth embodiment, as well as 
in the third embodiment, the security LBA is set when 
the write address information is set. Since steps S601 
to S605 in Fig. 12 correspond to steps S1 01 to S1 05 in 
Fig. 5, no explanation for them will be given. 
[0068] When, at step S605, the security area is in the 
initial state, it is assumed that the security information 
has not yet been set and the process advances to step 
S61 6, whereat the reading of data from the medium and 
the writing of data to the medium are permitted. If, at 
step S605, the security information has been set, at step 
S606, the device identifier recorded on the medium is 
compared with the device identifier of the storage de- 
vice, into which the medium has currently been loaded 
to determine whether the two device identifiers match. 
When the device identifiers do not match, at step S607, 
a check is performed to determine whether the security 
LBA has been designated in the security area. When 
the security LBA has not been designated, the reading 
and the writing of data are inhibited (step S608). 
[0069] If, at step S607, the security LBA has been 
designated, at step S609, a check is performed to de- 
termine whether the LBA for the data that are being ac- 
cessed has been included in the security LBA. If the LBA 
for the data has been included in the security LBA, the 
process advances to step S61 0, whereat the reading of 
data and the writing of data are inhibited. 
[0070] If the LBA for the data has not been included, 
the process advances to step S61 1 , whereat the reading 
of data and the writing of data are permitted. 
[0071] When, at step S606, the two device identifiers 
match, at step S61 2, a check is performed to determine 
whether the LBA for the data that are being accessed 
has been included in the security LBA. If the LBA for the 
data has been included in the security LBA, the process 
advances to step S613, whereat a check is performed 
to determine whether writing in accordance with the 
write address information is enabled. 
[0072] When the write address information has been 
set, the process advances to step S61 4, whereat writing 
of data is permitted but the reading of data is inhibited. 
That is, though the creation of new data is permitted, the 
reading of data from the medium is inhibited. When the 
write address information has not been set, the process 
advances to step S615, whereat both the reading and 
the writing of data are inhibited. 

[0073] If, at step S612, the LBA for the data that are 
being accessed has not been included in the security 
LBA, the process advances to step S616, whereat the 
reading of data and the writing of data are permitted. 
[0074] Fig. 13 is a flowchart for the security process 
performed according to a seventh embodiment of the 
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present invention. In the seventh embodiment, as well 
as in the third embodiment, the security LBA is set when 
the read address information and the write address in- 
formation are set. Since steps S701 to S705 in Fig. 13 
correspond to steps S101 to S105 in Fig. 5, no expla- 
nation for them will be given. 

[0075] When, at step S705, the security area is in the 
initial state, it is assumed that the security information 
has not yet been set and the process advances to step 
S720, whereat the reading of data from a medium and 
the writing of data to the medium are permitted. If, at 
step S705, the security information has been set, at step 

5706, the device identifier recorded on the medium is 
compared with the device identifier of the storage device 
into which the medium has currently been loaded in or- 
der to determine whether the two device identifiers 
match. When the device identifiers do not match, at step 

5707, a check is performed to determine whether the 
security LBA has been designated in the security area. 
When the security LBA has not been designated, the 
reading and the writing of data are inhibited (step S708). 
[0076] If, at step S707, the security LBA has been 
designated, at step S709, a check is performed to de- 
termine whether the LBA for the data that are being ac- 
cessed has been included in the security LBA. If the LBA 
for the data has been included in the security LBA, the 
process advances to step S71 0, whereat the reading of 
data and the writing of data are inhibited. 

[0077] If the LBA for the data has not been included, 
the process advances to step S71 1 , whereat the reading 
of data and the writing of data are permitted. 
[0078] When, at step S706, the two device identifiers 
match, at step S712, a check is performed to determine 
whether the LBA for the data that are being accessed 
has been included in the security LBA. If the LBA for the 
data has been included in the security LBA, the process 
advances to step S713, whereat a check is performed 
to determine whether reading in accordance with the 
read address information is enabled. When the read ad- 
dress' information has been set, the process advances 
to step S71 4, whereat a check is performed to determine 
whether writing in accordance with the write address in- 
formation is enabled. When the write address informa- 
tion has been set, the process advances to step S715, 
whereat both the reading and the writing of data are per- 
mitted. When, at step S715, the write address informa- 
tion has not been set, at step S716 the reading of data 
is permitted but the writing of data is inhibited. 
[0079] If, at step S713, the read address information 
has been set, the process advances to step S717, 
whereat a check is performed to determine whether writ- 
ing in accordance with the write address information is 
enabled. When the write address information has been 
set, at step S71 8, the writing of data is permitted but the 
reading of data is inhibited. When, at step S717, the 
write address information has been not set, at step 
S719, both the reading and the writing of data are inhib- 
ited. If, at step S712, the LBA for the data that are being 



accessed has not been included in the security LBA, the 
process advances to step S720, whereat the reading of 
data and the writing of data are permitted. 
[0080] Fig. 14 is a flowchart for the security release 
5 process performed to release the security setup state in 
which the above described various security processes 
are performed. 

[0081] First, at step S801 a security release command 
is transmitted from the computer 2 to the storage device 
10 1 . As well as the security setup command transmitted, 
the security release command is constituted by using 
the vender unique command at a SCSI interface. 
[0082] At step S802, the address information in the 
security area are read, and at step S803 a check is per- 
formed to determine whether there are security informa- 
tion in the security area. When security information has 
been recorded in the security area, the process advanc- 
es to step S804, whereat the device identifier included 
in the security area is compared with the device identifier 
of the storage device into which the medium has been 
loaded. When the two device identifiers match, a prede- 
termined initial value is recorded in the security area to 
return the area to the initial state (to initialize the area) 
(step S805). 

[0083] When the device identifiers do not match, or 
when no security information is recorded in the security 
area, the security release process is not performed. 
[0084] Although not shown in the above flowchart, 
when the security information include a password, a 
step of inputting the password is provided, and only 
when the password included in the security information 
matches the password which was entered the release 
of security may be performed. 

[0085] In the above described embodiments of the 
present invention, the security information (a device 
identifier, an address information, a password, etc.) to 
be recorded in the security area may be encoded to en- 
hance the secrecy. In this case, specific information for 
encoding is added to the security setup command, and 
the security information that are encoded in accordance 
with the information for encoding is recorded in the se- 
curity area. 

[0086] Fig. 15 is a flowchart for the medium loading 
process performed when the security information is en- 
coded. In Fig. 15, when the medium is inserted into a 
storage device at step S901 , at step S902, the loading 
of the medium is initiated. At step S903, medium man- 
agement information is read, and at step S904, a check 
is performed to determine whether there is security in- 
formation included in the medium information. 
[0087] When, at step S904, it is determined that no 
security information is included, the process advances 
to step S909, whereat the reading and the writing of data 
the medium are enabled. 

[0088] If, at step S904, it is determined that the secu- 
rity information is included, at step S905 a check is per- 
formed to determine whether the security information is 
encoded. When the security information is encoded, at 
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step S906, the security information is decoded. 
[0089] At step S907, the device identifier included in 
the security information is compared with the device 
identifier of the storage device into which the medium 
has currently been loaded to determine whether the two 
device identifiers match. When the device identifiers 
match, security is released and the process advances 
to step S909, whereat the reading and the writing of data 
to the medium are enabled. 

[0090] If, at step S907, the device identifiers do not 
match, the security is not released, and the reading data 
from and writing of data to the medium are inhibited 
(step S908). 

[0091] Fig. 16 is a flowchart for the medium loading 
process performed when the security information in Fig. 
15 includes a password. In Fig. 16, step S910 is added 
to the flowchart in Fig. 15. Specifically when the security 
information is decoded at step S906, a password which 
is input is compared with a password included in the se- 
curity information. When the two passwords do not 
match, the security is not released, and the reading and 
the writing of data to the medium are inhibited (step 
S908). 

[0092] When the passwords match, the process ad- 
vances to step S907, whereat comparison of the device 
identifiers Is performed as described above. 
[0093] For this process, the performance of steps 
S907 and S910, i.e., the comparison of passwords and 
the comparison of device identifiers, may be inverted. 
The execution sequence for the password comparison 
step and the device identifier comparison step can be 
arbitrarily set by the user, the maker or the retailer of a 
storage device, and such a setup can also be arbitrarily 
changed. 

[0094] The encoding of the security information is per- 
formed by using, for example, a DES algorithm or a sim- 
ple bit rearrangement process. The security information 
may be converted, for example, into ASCII, JIS, EDICI- 
BIC or ECU code before being recorded in the security 
area. 

[0095] In the above described embodiments of the 
present invention, the reading or the writing of data is 
permitted when device identifiers match. However, 
when the device identifiers do not match, either the 
reading or the writing of data may be permitted. 
[0096] Further, another preferred embodiments of the 
present invention will now be described. 
[0097] In the another preferred embodiments of the 
present invention, an additional security area is provid- 
ed in the medium information management area, and 
the security area has a medium identifier inherent to a 
medium, such as a serial number of the medium. And 
the medium identifier in the security area is recorded in 
the storage device. 

[0098] When the medium in which the medium iden- 
tifier is recorded is inserted into a storage device, data 
reading/writing control is provided in accordance with 
the relationship between the medium identifier recorded 



in the storage device and the medium identifier of the 
medium. For example, only when the two identifiers 
match, the reading/writing of data is permitted. In other 
words, since a storage device whose medium identifier 
5 differs from that of the inserted medium inhibits the read- 
ing/writing of data from/to the medium, the secrecy of 
data can be maintained. 

[0099] The writing in the storage device of the medium 
identifier is performed by the magneto-optical disk con- 
io troiler (ODC) 1 1 of a storage device in accordance with 
a security setup command received from a superior ap- 
paratus. 

[0100] Fig. 17 is a flowchart for recording process of 
the medium identifier to the storage device. In Fig. 17, 
*s when the storage device receives a security setup com- 
mand at step S1 01 1 , a check is performed to determine 
whether the medium identifier is already recorded in the 
storage device at step S1012. Then, if already recorded, 
recorded medium identifier is compared with the medi- 
co um identifier of the inserted medium at step 1013. In 
case that the two identifiers do not match, the process 
completed abnormally (step S1019). 
[0101] If not recorded yet at step S1 01 2, the medium 
identifier of the inserted medium is read by ODC 11 (step 
25 S1014), and the read medium identifier is recorded in a 
memory area in the ODC 1 1 (step S1 01 5). As described 
after, in case that security is set to a part of the data 
stored in the medium, an address information of the part 
of the data is recorded in the security area of the medium 
30 at step S1 01 6. A mode of the storage device is changed 
to a mode designated by security setup command at 
step S1 01 7 and the process is completed normally (step 
S1018). 

[0102] Fig. 18 is a flowchart for the security process 
35 performed by the storage device 1, according to an 
eighth embodiment of the present invention. The secu- 
rity process, which will be explained below, is performed 
by the magneto-optical disk controller (ODC) 1 1 of the 
storage device 1 . 
40 [0103] In Fig. 18, Since steps S1101 to S1105 corre- 
spond to steps S101 to S105 in Fig. 5, no explanation 
for them will be given. 

[01 04] At step S1 1 05, a check is performed to deter- 
mine whether the security area is in the initial state. If, 

45 at step S1105, the medium identifier has been recorded 
in the security area, i.e., if the security level has been 
set, at step S1 1 06, the medium identifier recorded in the 
storage device is compared with the medium identifier 
of the inserted medium in order to determine whether 

50 the'two medium identifiers match. 

[0105] When the two medium identifiers match, the 
process then advances to step S1 108 and the security 
is released i.e. the reading/writing of the data from/to 
the medium is permitted (step S1108). 

55 [0106] When at step S1106, the two medium identifi- 
ers do not match, the security is not released and the 
reading/writing of data is inhibited (step S1107). 
[0107] As described above, in this embodiment, the 
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security area in which the medium identifier of the me- 
dium provided in the security area is recorded in the stor- 
age device. When the medium is loaded into the storage 
device and when the medium identifier of the inserted 
medium does not match the medium identifier recorded 
in the storage device, the reading and writing of data is 
inhibited. Thus, even though the medium has been sto- 
len, the secrecy of the data recorded in the medium can 
be maintained. 

[0108] Fig. 19 is a flowchart for the security process 
performed according to a ninth embodiment of the 
present invention. In the ninth embodiment, the read ad- 
dress information is recorded in the above described pa- 
rameter head. Since steps S1201 to S1205 in Fig. 19 
correspond to steps S201 to S205 in Fig. 8, no expla- 
nation for them will be given. 

[0109] If, at step S1205, the security information has 
been set, at step S1 206, the medium identifier read from 
the storage device is compared with the medium iden- 
tifier of the inserted medium to determine whether the 
two medium identifiers match. When the medium iden- 
tifiers do not match, the process advances to step 
S1 207 and when the two medium identifiers match, the 
process advances to step S1208. 
[0110] Since steps S1207 to S1211 in Fig. 19 corre- 
spond to steps S207 to S211 in Fig. 8, no explanation 
for them will be given. 

[0111] Fig. 20 is a flowchart showing the security 
process performed according to a tenth embodiment of 
the present invention. In this embodiment, the write ad- 
dress information is set in the parameter header. Since 
steps S1301 to S1305 in Fig. 20 correspond to steps 
S301 to S305 in Fig. 9, no explanation for them will be 
given. 

[0112] If, at step S1305, the security information has 
been set, at step S1306, the medium identifier read from 
the storage device is compared with the medium iden- 
tifier of the inserted medium to determine whether the 
two medium identifiers match. When the medium iden- 
tifiers do not match, the process advances to stop 
S1 307 and when the two medium identifiers match, the 
process advances to step S1308. 
[0113] Since steps S1307 to S1311 in Fig. 20 corre- 
spond to steps S307 to S311 in Fig. 9, no explanation 
for them will be given. 

[0114] Fig. 21 is a flowchart showing the security 
process performed according to an eleventh embodi- 
ment of the present invention. In this embodiment, both 
the read address information and the write address in- 
formation are set in the parameter header. Since steps 
S1401 to S1405 in Fig. 21 correspond to steps S401 to 
S405 in Fig. 10, no explanation for them will be given. 
[0115] If, at step S1405, the security information has 
been set, at step S1 406, the medium identifier read from 
the storage device is compared with the medium iden- 
tifier of the inserted medium to determine whether the 
two medium identifiers match. When the medium iden- 
tifiers do not match, the process advances to step 



S1 407, and when the two medium identifiers match, the 
process advances to step S1408. 

[0116] Since steps S1407 to S 141 5 in Fig. 21 corre- 
spond to steps S407 to S415 in Fig. 10, no explanation 
5 for them will be given. 

[0117] Fig. 22 is a flowchart for the security process 
performed according to twelfth embodiment of the 
present invention. In this embodiment, as well as in the 
fifth embodiment, the security LBA is set when read ad- 
10 dress information is set. Since steps S1 501 to S1 505 in 
Fig. 22 correspond to steps S1501 to S1505 in Fig. 12, 
no explanation for them will be given. 
[0118] If, at step S1505, the security information has 
been set, at step S1 506, the medium identifier read from 
the storage device is compared with the medium iden- 
tifier of the inserted medium to determine whether the 
two medium identifiers match. When the medium iden- 
tifiers do not match, the process advances to step 
S1 507 and when the two medium identifiers match, the 
process advances to step S1512. 
[0119] Since steps S1507 to S1516 in Fig. 22 corre- 
spond to steps S507 to S516 in Fig.11, no explanation 
for them will be given. 

[0120] Fig. 23 is a flowchart for the security process 
performed according to a thirteenth embodiment of the 
present invention. In this embodiment, as well as in the 
sixth embodiment, the security LBA is set when the write 
address information is set. Since steps S1 601 to S1 605 
in Fig. 23 correspond to steps S601 to S605 in Fig. 12, 
no explanation for them will be given. 
[0121] If, at step S1605, the security information has 
been set, at step S1 606, the medium identifier read from 
the storage device is compared with the medium iden- 
tifier of the inserted medium to determine whether the 
two medium identifiers match. When the medium iden- 
tifiers do not match, the process advances to step 
S1 607, and when the two medium identifiers match, the 
process advances to step S1612. 

[0122] Since steps S1607 to S1616 in Fig. 23 corre- 
spond to steps S607 to S616 in Fig. 12, no explanation 
for them will be given. 

[0123] Fig. 24 is a flowchart for the security process 
performed according to a fourteenth embodiment of the 
present invention. In this embodiment, as well as in the 
seventh embodiment, the security LBA is set when the 
read address information and the write address infor- 
mation are set. Since steps S1701 to S1705 in Fig. 24 
correspond to steps S701 to S705 in Fig. 13, no expla- 
nation for them will be given. 

[0124] If, at step S1705, the security information has 
been set, at step S1 706, the medium identifier read from 
the storage device is compared with the medium iden- 
tifier of the inserted medium in orderto determine wheth- 
er the two medium identifiers match. When the medium 
identifiers do not match, the process advances to step 
S707 and when the two medium identifiers match, the 
process advances to step S71 2. 

[0125] Since steps S1707 to S1720 in Fig. 24 corre- 
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spond to steps S707 to S720 in Fig. 13, no explanation 
for them will be given. 

[0126] Fig. 25 is a flowchart for the security release 
process performed to release the security setup state in 
the another preferred embodiments. 
[0127] Since steps S1801 to S1803 in Fig. 25 corre- 
spond to steps S801 to S803 in Fig. 14, no explanation 
for them will be given. 

[0128] When security information has been recorded 
in the security area at step S1 803, the process advanc- 
es to step S1 804, whereat the medium identifier record- 
ed in the storage device is compared with the medium 
identifier of the inserted medium. When the two medium 
identifiers match, a predetermined initial value is record- 
ed in the security area to return the area to the initial 
state (to initialize the area) (step S1805). 
[0129] When the medium identifiers do not match, or 
when no security information is recorded in the security 
area, the security release process is not performed. 
[0130] In the above described another embodiments 
of the present invention, the security information (a me- 
dium identifier, an address information, a password, 
etc.) to be recorded in the security area may be encoded 
to enhance the secrecy. In this case, information for en- 
coding are added to the security setup command, and 
the security information that is encoded in accordance 
with the information for encoding are recorded in the se- 
curity area. 

[0131] Fig. 26 is a flowchart for the medium loading 
process performed when security information is encod- 
ed. In Fig. 26, Since steps S1901 to S1806 in Fig. 26 
correspond to steps S901 to S906 in Fig. 15, no expla- 
nation for them will be given. 

[0132] At step S1 907, the medium identifier recorded 
in the storage device is compared with the medium iden- 
tifier of the inserted medium to determine whether the 
two medium identifiers match. When the medium iden- 
tifiers match, security is released and the process ad- 
vances to step S1 909, whereat the reading and the writ- 
ing of data to the medium are enabled. 
[01 33] If, at step S 1 907, the medium identifiers do not 
match, security is not released, and the reading data 
from and writing of data to the medium are inhibited 
(stepS 1908). 

[0134] Fig. 27 is a flowchart for the medium loading 
process performed when the security information in- 
cludes a password in Fig. 26. In Fig. 27, step S1910 is 
added to the flowchart in Fig. 26. Specifically, when the 
security information is decoded at step S1906, a pass- 
word which is input is compared with a password includ- 
ed in the security information. When the two passwords 
do not match, the security is not released, and the read- 
ing and the writing of data to the medium are inhibited 
(step S1908). When the passwords match, the process 
advances to step S1907, whereat comparison of the 
medium identifiers is performed as described above. 
[0135] As is described above, according to the 
present invention, a security area is provided for a me- 



dium information management area on a medium, such 
as a magneto-optical disk, and a device identifier inher- 
ent to a storage device is recorded in the security area. 
When such a medium is inserted into a storage device, 

5 the device identifier recorded in the medium is com- 
pared with the device identifier of the storage device, 
and when the device identifiers do not match, accessing 
the data on the medium is inhibited. As a result, the data 
secrecy is ensured. 

10 [0136] Further a medium identifier inherent to a me- 
dium is recorded in the storage device. When such a 
medium is inserted into a storage device, the medium 
identifier recorded in the storage device is compared 
with the medium identifier of the inserted medium, and 

15 when the medium identifiers do not match, accessing 
the data on the medium is inhibited. As a result, the data 
secrecy is ensured. 

[01 37] The present invention may be embodied in oth- 
er specific forms without departing from the spirit or es- 
sential characteristics thereof. The present embodiment 
is therefore to be considered in all respects as illustrative 
and not restrictive, the scope of the invention being in- 
dicated by the appended claims rather than by foregoing 
description and all change which come within the mean- 
ing and range of equivalency of the claims are therefore 
intended to be embraced therein. 



Claims 

30 

1 . A data storage device which reads data from and/ 
or writes data to a memory medium, comprising: 

a storage unit for storing a first identifier previ- 
35 ousfy recorded by said storage device itself; 

an identifier acquisition unit for acquiring a sec- 
ond identifier in said memory medium, said sec- 
ond identifier identifying said memory medium 
as a unique medium, said memory medium be- 
^0 ing set to said data storage device; and 

a controller for comparing said first identifier 
with said second identifier, and controlling to 
access to said memory medium for data read- 
ing and/or writing according to a relationship 
45 between said first identifier and said second 

identifier, 

wherein said data storage device is able to 
record said second identifier to said storage unit as 
so said first identifier. 

2. The data storage device according to claim 1, 
wherein said first and seconded identifiers are serial 
numbers of a memory medium. 

55 

3. The data storage device according to claim 1, 
wherein said controller permits or inhibits the read- 
ing of data and/or the writing of data in accordance 



40 



20 



25 



11 
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with a result obtained by the comparison of said first 
identifier and said second identifier. 

4. The data storage device according to claim 1, 
wherein said memory medium includes read ad- 
dress information to be used to control data reading, 
and said controller permits or inhibits the reading of 
data in accordance with said read address informa- 
tion and a result obtained by the comparison of said 
first identifier and said second identifier. 

5. The data storage device according to claim 1, 
wherein said memory medium includes write ad- 
dress information to be used to control data writing, 
and said controller permits or inhibits the writing of 
data in accordance with said write address informa- 
tion and a result obtained by the comparison of said 
first identifier and said second identifier. 

6. A data storage device which reads data from and/ 
or writes data to a memory medium by designating 
first address information, comprising: 

a storage unit for storing a first identifier previ- 
ously recorded by said storage device itself; 
an identifier acquisition unit for acquiring a sec- 
ond identifier in said memory medium, said sec- 
ond identifier identifying said memory medium 
as a unique medium, said memory medium be- 
ing set to said data storage device; 
an address information acquisition unit for ac- 
quiring second address information recorded in 
said memory medium; and 
a controller for comparing said first identifier 
with said second identifier and said first ad- 
dress information with said second address in- 
formation, and controlling to access to said 
memory medium for data reading and/or writing 
according to a relationship between said first 
identifier and said second identifier and a rela- 
tionship between said first address information 
and said second address information, 

wherein said data storage device is able to 
record said second identifier to said storage unit as 
said first identifier. 

7. The data storage device according to claim 6, 
wherein said memory medium includes read ad- 
dress information to be used to control data reading, 
and said controller permits or inhibits the reading of 
data in accordance with said read address informa- 
tion, a result obtained by the comparison of said first 
identifier and said second identifier and a result ob- 
tained by the comparison of said first address infor- 
mation and said second address information. 

8. The data storage device according to claim 6, 



22 

wherein said memory medium includes write ad- 
dress information to be used to control data writing, 
and said controller permits or inhibits the writing of 
data in accordance with said write address informa- 
5 tion, a result obtained by the comparison of said first 

identifier and said second identifier and a result ob- 
tained by the comparison of said first address infor- 
mation and said second address information. 

10 9. The data storage device according to claim 1, 
wherein said memory medium includes a password, 
and said controller permits or inhibits the reading of 
data and/or the writing of data in accordance with 
determination of said password and a result ob- 

15 tained by the comparison of said first identifier and 
said second identifier. 

10. The data storage device according to claim 1, 
wherein 

20 said memory medium is one of writable memory 
media as a magnetic disk, a floppy disk, an optical 
disk, a magneto-optical disk and a phase change 
optical disk. 

25 11. A method for controlling a data storage device 
which reads data from and/or writes data to a mem- 
ory medium, comprising the steps of : 

acquiring a first identifier stored in said data 
30 storage device, said first identifier previously 

recorded by said data storage device; 
acquiring a second identifier on said memory 
medium, said second identifier identifying said 
memory medium as a unique medium, said 
35 memory medium being set to said data storage 

device; 

comparing said first identifier with said second 
identifier; and 

controlling to access to said memory medium 
40 for reading of , data and/or writing of data ac- 

cording to a relationship between said first 
identifier and said second identifier, 

wherein said data storage device is able to 
45 record said second identifier to said storage unit as 
said first identifier. 

12. The control method according to claim 11 , wherein 
said memory medium includes read address infor- 

50 mation to be used to control data reading, and in 
said step of controlling, and the reading of data is 
permitted or inhibited in accordance with said read 
address information and a result obtained by the 
comparison of said first identifier and said second 
55 identifier. 

13. The control method according to claim 11', wherein 
said memory medium includes write address infor- 
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mation to be used to control data writing, and in said 
step of controlling, and the writing of data is permit- 
ted or inhibited in accordance with said write ad- 
dress information and a result obtained by the com- 
parison of said first identifier and said second iden- 5 
tifier. 

14. The control method according to claim 11 , wherein 
said memory medium includes a password, and in 
said step of controlling, the reading of data and/or 10 
the writing of data is permitted or inhibited in accord- 
ance with determination of said password and a re- 
sult obtained by the comparison of said first identi- 
fier and said second identifier. 

15 

15. The control method according to claim 11 , wherein 
said memory medium is one of writable memory 
media as a magnetic disk, a floppy disk, an optical 
disk, a magneto-optical disk and a phase change 
optical disk. 20 



25 



30 



35 



40 



45 



50 



55 



13 



EP 1 211 681 A1 



O 
LL. 




14 



EP1 211 681 A1 



FIG. 2 



""A 



Medium information 
management area 



Data area 

Medium information 
management area 







Zone 


Radius mm 


Track No. 


Lead-in Zone 






I 


Initial Zone 


22.60—23.14 




Acquire Zone 








Lead-in tracks 


23,14—23.60 


-434 93 




Focus tracks 


23.60—23.61 


•88 85 


Inn 


er Test Zone 








for manufacturers 


23.61 —23.65 


-84—53 




for drives 


23.65—23.70 


-52 21 


Inn 


er Control Zone 


23.70-23.72 


-20—5 


Buffer Zone 


23.72-23.72 


-4 1 


Data Zone 


23.72—41.00 


0—18479 


Outer Test Zone 








for manufacturers 


41.00—41.02 


18480—18511 




for drives 


41.02—41.06 


18512—18543 


Bu 


ffer Zone 


41.06—41.28 


18544~ 18854 



15 



EP 1 211 681 A1 



FIG. 3 







Bit 






7 


6 


5 


4 


3 


2 


1 


0 




00 


0 


0 


0 


0 


0 


1 


0 


0 




01 


LUN 


FMT 
DATA 


CM P 
LIST 


DEFECT LIST FORMAT 


Byte 


02 


Security (evel 


03 


INTERLEAVE 




04 


INTERLEAVE 




05 


0 


0 


0 


0 


0 


0 


Flag 


Unk 



16 



EP 1 211 681 A1 



FIG. 4 







Bit 






7 


6 


5 


4 


3 


2 


1 


0 




00 


1 


1 


1 


0 


0 


0 


0 


0 




01 


LUN 


0 


0 


0 


0 1 


3 


Byte 


02 


Security level 


03 


X*00* 




04 


Parameter list length 




05 


0 


0 


0 


0 


0 0 


Flag 


Link 



17 



EP 1 211 681 A1 



FIG. 5 



( START ) 
Insert medium 



S101 



S102 



Start medium loading process 



Read medium information 

3 



S103 
S104 



| Read security information in security area | 



YES 



YES 



.S_ecurity area is initial statej, 
NO 



Device identifier 
of the storage device 
Oevice identifier recorded 
in the inserted medium 



S105 



S106 



Read/Write disable 



I 



S1 07 



Read/Write enable 



S1 08 



18 



EP1 211 681 A1 



FIG. 6A 



Bit 
Byte 


7 6 5 


4 3 


2 


1 


0 


0 


X* ov 


1 




2 




Write 
address 
information 


Read 
address 
information 


LBASET 


3 


Data block length 


FIG. 6B 


Bit 
Byte 


7 6 5 


4 3 


2 


1 


0 


0 


Security level 


1 


Page code 


n 


Parameter field 



19 



EP1 211 681 A1 



FIG. 7A 



Bit 

Byte 


7 


6 • 


5 


4 


3 


2 


1 


0 


0 


X'Ol' 


1 


X' 01' 


2~22 


Password 


FIG. 7B 


Bit 

Byte 


7 


6 


5 


4 


3 


2 


1 


0 


• 

0 


X* 01' 


1 


X'02' 


2 


Page length 


3—6 


Security LBA 




Security LBA 


n~n+3 


Security LBA 



20 



EP1 211 681 A1 



FIG. 8 



( START ) 

^ S 20T 



Insert medium 

i 



S202 



Start medium loading process 

I 



S203 



Read medium information 

I 



S204 



Read security information in security area 



YES 



Security area is initial state? 



S205 



NO 

YES - "**"'■" Device identifier 

_of the storage device = Device identifier^ 
recorded in the inserted medium" 



S206 




i— — <CRead address information is set ?~ 



YES 



Read enable 
Write disable 



S207 



S208 



S209 



Read/Write disable 



Read/Write enable 
] 



S210 



S211 



21 



EP 1 211 681 A1 



FIG. 9 



C ^ART ) 

S301 



Insert medium 



S3 02 



Start medium loading process 



Read medium information 

I 



S3 03 
S304 



Read security information in security area 



YES 



Security area is inial state ? 



S305 



' NO 



YES Device identifier 

jjf the storage device = Device identifier^ 
ecorded on the medium ?- 



S306 




r <3Vrite address information is set 



YES 



Read disable 
Write enable 



Read/Write disable 



Read/Write enable 
l 



S307 



S308 



S309 



S310 



S311 



22 



EP 1 211 681 A1 



FIG. 10 



( START ) 

j S401 



Insert medium j 

+ S 402 



Start medium loading process 

t — 



S403 



Read medium information 

i Z 



Read security information in security area 



S404 



YES 



^Security area is initial state 



S405 



YES 



Device identifier 
^of the storage device = Device identifier 
"recorded_onthejjiedium 



S406 



Read/Write disable 



NO 



NO 



«CRead address information is ^set 

"yIs* 

/rite address information is set 




S407 

S408 

S409 
S410 



( Read enable/Write disable S41 1 



NO 



«^Write add ress informatio n is s et ?z=— S412 

S413 



Read disable/Write enable 



Read disable/Write disable 



S414 



Read/Write enable 
' 1 



S415 



23 



EP 1 211 681 A1 



F IG. 11 

( START ) 



Insert medium 

T 



S501 



Start a medium loading process S502 

V — 

JI_ — __ — S503 



Read tnesium information 



YES . 




S504 



^ Securi ty area is initial state ?Z 
NO 



YES 



YES 




Device identifier ' 
Iqf_the storage device = Device identifier ! 
scorded on the medium ?' 

NO 



S505 
S506 



"Security L BA is de signated ?Z 
-»^NO 



Read/Write disable 



S507 
S508 



A of accessed data is inc!ud< 
in the security LBA ?, 

E^ YES^ 



S509 



Read /Write disable 



Read/Write enable 



S510 



S511 



NO 



NO 



3A of accessed data is includec 
in the securit y LBA ?- 

YES 

«=Read _addresss informatio n is__s et ' 




| Read/Write disable 



Read/Write enable 



S512 

S51G 
S5U 

S515 
S516 



24 



EP1 211 681 A1 



FIG. 12 



( START ) 



Insert medium 

T 



S601 



| Start medium loading process" 



S602 



Read medium information | S603 



Read security information in security area 

T 



S604 




S605 



Y£5 ^^-^-""Device identifier" 

^ ofthe storage device = Device identifier ] 
scorded on the mediur 



S606 



YES 



*a=rSecurity LBA is designated 7l 



S607 



NO 



Read/Write disable 



S6QB 



NO ^ LBA of accessd data is" 

included in the security LBA 



z , 

Read/Write disable | 




S609 



NO 



S611 

of accessed data is included in the security _LBA 
NO 



S612 



YES 



Vrite addresss information is set 



▼ YES 



Read enable/Write disable 



Read/Write disable 



Read/Write enable ) 



S613 
S614 

S615 
S616 



25 



EP 1 211 681 A1 



FIG. 13 



f START A 



insert a medium 

5 



Start medium loading process 



Read medium information 
3" 



S701 
S702 
S703 

S704 
S705 



Device identifier of the storage device = Dev ice — ^ S706 
"identifier recorded in the inserted, medium T*"' 




YES 



T NO 



e cunty LB A is designate d ' 
fr fr NO 



Read/Write disable 



S707 
S708 



J_8Ajs accessed data is included in the security LBA . 



S709 



NO 



-*¥ YE? . 

Read/Write disable S710 



Read/Write 'enable 



S7T1 



NO 



*#-*LBA of ac cessed data is include d in the secu rity LBA S712 

no ~ ~ ▼ ~~ 



NO 



Read address inform ation is s et ' 
.YES 



i CWrit e addres i nfor mation is s et ' 

Z T g YES 



[ 



Re ad/ Write enable 



S713 
S714 

S715 



1 Read enable/write disable ^ S716 



Vrite addr ess inform ation is set ? 

h2Tyes 



| Read disable/ Write enable j 



Read disbJe/WHte disable 



S717 
S718 

S719 



| Read/ Write enable I s72 



26 



EP 1 211 681 A1 



FIG. 14 

( START ) 



Issue a security release command 


S801 








Read information in the security area 


S802 









NO 

Security information is included, 
YESi 

NO '"""^Device identifier 

^— — <ofthe storage device = Device identifier ! 

corded on the medium ?- 

YESl 



S803 



S804 



Return security area to initial state 



S805 



( END ) 



27 



EP1 211 681 A1 



FIG. 15 

( START ) 





f S901 


Insert medium 


1 


r S902 


Start medium loading process | 




f S903 


Read medium information 




S904 



S905 



S907 



YES ^ -*-" Device identifier 

,of the storage device = Device identifier^ 
scorded on the mediur 





NO 

r 








Read/Write disable 






j 



S908 



Read/Write enable 



S909 



28 



EP 1 211 681 At 



FIG. 16 

( START ) 





S901 




r 




Insert a 


medium 





S902 



Start medium loading process 

I 



S903 



Read medium information 



NO 



S904 



NO 



YES 



^^curity information is included ?_ 
YES 

Security information is encodec 
YES 

S9Q6 




S910 

Jnputted pas sward = Password , 
recorded on the inserted 
medium 

YES 

_ S907 

Device identifer 
of the storage device = 
Device identifier recorded 
on the medium 

NO 



Read/Write disable 



S905 



Read/Write enable 



NO 



S908 



S909 



29 



EP 1 211 681 A1 



FIG. 17 



S1011 




YES 



S1014 



Read a medium identifier of inserted medium 

X ~~ S1015 



Record the medium identifier in the 
storage device 



S1016 



Record an address information in a 
security area 



S1019 



S1017 



Change a mode 



Complete 
abnormally 



S1018 



Complete normally 



( ) 



30 



EP1 211 681 A1 



FIG. 18 

( START ) 



1 


r 


Insert medium 



S1101 



Start medium loading process 

I 



Read medium information 



S1 102 

S1 103 



YES 



Security area is initial state ? 
NO 



I Read security information in security area 







S1104 



S1105 



YES 



Medium identifer 
recorded in the storage device 
Medium identifier 
if the inserted medii 



-WNO 



Read/Write disable 



Read/Write enable 



S1106 



S1 107 



S1108 



31 



EP 1 211 681 A1 



FIG. 19 



C START ") 



Insert medium 

T 



SI 201 



I Start medium loading process 



Read medium information 



SI 202 
S1203 



Read security information in security area 



S1204 




S1205 



S1206 



SI 207 



S1208 



S1209 



S1210 



S1211 



32 



EP1 211 681 A1 



FIG. 20 



( START ) 



Insert medium 

i 



S1301 



Start medium loading process 



Read medium information 

T 




S1302 
SI 303 
S1304 



'Medium identifier"""-.^ 
recorded in the storage device 
Medium identifier of the 
inserted mediu 



I <CWrite address information is set 



-N_ YES 



Read disable 
Write enable 



J 



S1305 




SI 306 




S1307 



S1308 



S1309 



YES 



Read/Write disable 



S1310 



Read/Write enable 



S1311 



33 



EP 1 211 681 A1 



FIG. 2 1 

( START } 



Insert a medium 



S1401 



Start medium loading process j S1402 








Read/Write enable 



S1411 



S1412 



S1413 



S1414 



S1415 



34 



EP1 211 681 A1 



FIG. 22 



( START ) 



Insert medium 

E 



S1501 



Start medium Joading process ] £j 




502 



SI 503 



SI 504 



S1505 



f Read/Write disable | 



NO 



_LBA of accessed data is included in the 
.security LBA ?_ 



S1506 

S1507 
S1508 

SI 509 



±t YgS 



Read/Write disable \ S1510 



r Read/Write enable ~] S1511 



NO 



LBA of acc essed da ta is include d in the sec urity LBA ?— 

YES 

^ S1513 



NO 



<Rea d_ addre ss informati on is s et *K 
~Nr YES 



Read enable/Write disable 
I 



S1514 



3l 



Read/Write disable j 



S1515 



Read/Write enable 1 S1516 



S1512 



35 



EP 1 211 681 A1 



FIG. 23 



( START ) 



Insert medium 



Start medium loading process 



YES 



S1601 
SI 602 
S1603 

Read security information in security area J S1604 
—— 

^-""llSecurity area is initial state ?H S1605 



Read medium information 



YES 





edium identifier "^-^^ 
recorded in the storage device = 
Medium identifier of the 
inserted mediui 




S1606 



YES 



NO 



*==Secu rity LBA is design ated 



Read/Write disable 



S1607 
S1608 



NO 



_LB A of accessed data is included in the 

^security LBAJ?^^ ^ S1609 

, -Yg§ 

[ Readd/Write disable J ST610 




_LBA of accessed data is included in the 
security LBA ?- 



NO 



YES 



rWrite address information is set 



S1611 

S1612 
S1613 
S1614 

Read/Write disable j . S1615 

S1616 




36 



EP 1 211 681 A1 



f START ) 
j 

FIG. 24 l insert a medium | 



S1701 



L 



| Start medium loading process S * 

I SI 703 



Read medium information 



| Read secmrty information in security area | SI 704 




St 709 



S1719 



] SI 720 



37 



EP 1 211 681 A1 



FIG. 25 



( START ) 







Issue a security release command 






Read information in the security area 



security information is included^. 

YES^ 

evice identifier 
of the storage device = 
Device identifier recorded 
n the mediur 

YES 




Return security area to initial state 



( END ) 



S1801 
S1802 

S1803 
► S1804 

S1805 



38 



EP1 211 681 A1 



FIG. 26 



(start) 

-Insert medium 



S1901 



Start medium loading process 






Read medium information 







SI 902 



S1903 




S1904 



St 905 



S1907 



S1908 



1 


r 




Read/Write enable 



S1909 



39 



EP1 211 681 A1 



FIG. 27 ( START ) 



Insert medium 








Start medium loading process 




1 


r 


Read msdium information 



NO 



NO 



security area is initial state_ 
YES 

Security information is encode d 
YES 

S1906 




S1910 

inputted password = Password 
recorded on the inserted 
medium 



S1904 



S1905 



r YES 



S1907 



Device identifier 
of the storage device = 
)evice identifier recorded in the^ 
Jnserted medium^ 



NO 



Read/Write disable 



S1908 



Read/Write enable 



S1909 



40 



EP1 211 681 A1 



FIG. 28 



( START 





1 


f S1 


Insert medium 




r S2 




Start medium loading process 








Read medium information 






I ► 




Read/Write enable 


' I 





41 



EP 1 211 681 A1 



European Patent 
Office 



EUROPEAN SEARCH REPORT 



Application Number 

EP G2 09 2690 



DOCUMENTS CONSIDERED TO BE RELEVANT 



Category 



Citation of document with indication, where appropriate. 
of relevant passages 



Relevant 
to claim 



CLASSIFICATION OF THE 
APPLICATION (lnLCL7) 



EP 0 773 490 A (FUJITSU LTD) 
14 May 1997 (1997-05-14) 

* abstract * 

* column 1, line 3 - column 2, line 38 * 

* column 4, line 46 - column 5, line 5 * 

* column 5, line 30 - column 7, line 1G * 

* figures 1,4,6,7 * 

EP 0 930 615 A (FUJITSU LTD) 
21 July 1999 (1999-07-21) 

* the whole document * 

EP 0 553 545 A (SEGA ENTERPRISES KK) 
4 August 1993 (1993-G8-04) 



* abstract * 

* column 4, line 9 

* figures 1-3 * 



column 5, line 51 * 



US 5 644 444 A (BRAITHWAITE DAVID G ET 
AL) 1 July 1997 (1997-07-01) 

* abstract * 

* column 2, line 24 - column 3, line 2 * 

* coluiran 7, line 58 - column 12, line 7 * 

* figures 6A,6B * 

EP 0 813 194 A (SONY CORP) 
17 December 1997 (1997-12-17) 

* abstract * 

* column 16, line 39 - column 17, line 28 

* column 19, line 25 - column 20, line 31 
★ 

* column 20, line 43 - line 46 * 

* column 23, line 49 - column 25, line 3 * 

* column 25, line 27 - line 31 * 

* figures 1,6-8 * 



The present search report has been drawn up for all claims 



1-6,12, 
13 



G11B2O/00 



1-11, 

13-16, 

18-24 



1-6, 
9-11, 
13-16,24 



1,6-18, 
24 



TECHNICAL FIELDS 
SEARCHED (IM.CL7) 



G11B 



1,9,14 



Placed March 

THE HAGUE 



Date of completion of tho search 

27 March 2302 



Examiner 

Barel-Faucheux, C 



CATEGORY OF CITED DOCUMENTS 

X : particularly relevant if taken alone 

Y : particularly relevant if combined with another 

document of the same category 
A : technological background 
O : non-written disclosure 
P : Intermediate document 



T : theory or principle underlying the invention 
E : earfer patent document but published on, or 

after the fiOng date 
D : document cited in the application 
L : document cited for other reasons 



& : member of the same patent famly, corresponding 
document 



42 



EP1 211 681 A1 



European Patent 
Office 



EUROPEAN SEARCH REPORT 



Application Number 

EP 82 00 269Q 



DOCUMENTS CONSIDERED TO BE RELEVANT 



Category 



Citation of document with indication, where appropriate, 
ol relevant passages 



Relevant 
! to claim 



CLASSIFICATION OF THE 
APPLICATION (lm.Cl7) 



EP 6 439 290 
31 July 1991 

* abstract * 

* column 24, 



A (SONY CORP) 
(1991-07-31) 

line 32 - column 25, line 22 



1,9,14 



column 
column 
column 



27 
28, 
29 , 



line 
1 ine 
line 



20 
11 
12 



-line 
- line 
-line 



23 
59 
26 



figures 14,16-18 



US 5 379 433 A (YAMAGISH1 TORU) 

3 January 1995 (1995-01-03) 

* abstract * 

* figure 4 * 



The present search report has been drawn up lor all claims 



1,9,14 



TECHNICAL FIELDS 

(Irrt.CLT) 



Place of search 

THE HAGUE 



Date of completion of Ihe search 

27 March 2G02 



Examiner 

Barel-Faucheux, C 



s 



CATEGORY OF CITED DOCUMENTS 

X : particularly relevant if taken abne 

Y : particularly relevant if combined with another 

document of the same category 
A : technological background 
O : non- written oSsctosure 
P : intermediate document 



T : theory or principle underlying the Invention 
E : earlier patent document, but published on. or 

after the filing date 
D : document cited in the application 
L : document cited for other reasons 



& : member at the same patent f amity, corresponding 
document 



43 



EP1 211 681 A1 



ANNEX TO THE EUROPEAN SEARCH REPORT 
ON EUROPEAN PATENT APPLICATION NO. 



EP 02 00 2690 



This annex lists the patent family members relating to the patent documents cited in the above-mentioned European search report. 
The members are as contained in the European Patent Office EDP file on 

The European Patent Office is in no way liable for these particulars which are merely given for the purpose of information. 

27-03-2802 



Patent document 
cited in search report 


Publication 
date 


Patent family 
members) 


Publication 
date 


EP D773490 


A 


14-05-1997 


JP 


9134311 A 


20-05-1997 








JP 


9134330 A 


20-05-1997 








EP 


0773490 Al 


14-Q5-1QQ7 








US 


5857021 A 


05-01-1999 

\**J Ul 1777 


EP 0930615 


A 


21-07-1999 


JP 


11213548 A 


06-08-1999 

W W 1777 








EP 


0930615 A2 


21 -A7- 1 QQQ 

C. ± \J / X 7 77 








US 


2002004884 Al 




EP 0553545 


A 


04-08-1993 


JP 


2942837 B2 


Jv \J\J 1777 








JP 


5210497 A 


20-08-1993 








DE 


69230735 Dl 


06-04-2000 








DE 


69230735 T2 


26-10-2000 








DE 


69231438 Dl 


19-10-2000 

17 1 \J CsJ\J\J 








DE 


69231438 T2 


10-04-2001 

17 LUv 1 








EP 


0553545 A2 


04-08-1993 








EP 


0718838 A2 


26-06-1996 








US 


5371792 A 


06-12-1994 

vU 1C 177"T 








US 


RE35839 E 


07-07-1998 


US 5644444 


A 


01-07-1997 


CA 


2211590 Al 


19_09_1996 








DE 


69613096 Dl 


05-07-2001 








DE 


789908 Tl 


19-02-1998 








EP 


1132910 A2 


12-09-2001 








EP 


0789908 Al 


20-08-1997 








JP 


10504420 T 


28-04-1998 








WO 


9628820 Al 


19-09-1996 








US 


6104561 A 


15-08-2000 








US 


5949601 A 


07-09-1999 


EP 0813194 


A 


17-12-1997 


JP 


10003745 A 


06-01-1998 








CN 


1182268 A 


20-05-1998 








EP 


0813194 A2 


17-12-1997 








US 


6034832 A 


07-03-2000 


EP 0439290 


A 


31-07-1991 


JP 


3215891 A 


20-09-1991 








JP 


2805102 B2 


30-09-1998 








JP 


3286444 A 


17-12-1991 








DE 


69122632 Dl 


21-11-1996 








DE 


69122632 T2 


13-03-1997 








EP 


0439290 Al 


31-07-1991 








KR 


196588 Bl 


15-06^1999 








US 


5361173 A 


01-11-1994 


US 5379433 


A 


03-01-1995 


JP 


2293930 A 


05-12-1990 





uj For more details about this annex : see Official Journal of the European Patent Office. No. 12/82 



44 



